JobOps vulnerabilities

CVEs whose affected-version data names the JobOps package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111313Medium· 6.5

yesterday

JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch

JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destination…

▾ SunlitDaKheera47 · JobOpsvia CVEORG